high
7.5
CWE
20
Advisory Published
Updated

CVE-2007-3701: Input Validation

First published: Wed Jul 11 2007(Updated: )

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Tippingpoint Tipping Point=400
3com Tippingpoint Ips Tos=2.2
Tippingpoint Tipping Point=1200
3com Tippingpoint Ips Tos=2.5.1
Tippingpoint Tipping Point=50
3com Tippingpoint Ips Tos=2.2.1.6506
3com Tippingpoint Ips Tos=2.1
Tippingpoint Tipping Point=5000e
3com Tippingpoint Ips Tos=2.2.1
Tippingpoint Tipping Point=2400e
Tippingpoint Tipping Point=sms
3com Tippingpoint Ips Tos=2.2.3
Tippingpoint Tipping Point=zpha
Tippingpoint Tipping Point=x505
3com Tippingpoint Ips Tos=2.2.2
Tippingpoint Tipping Point=1200e
Tippingpoint Tipping Point=200e
3com Tippingpoint Ips Tos=2.2.4
3com Tippingpoint Ips Tos=2.1.4.6324
Tippingpoint Tipping Point=x506
Tippingpoint Tipping Point=200
3com Tippingpoint Ips Tos=2.5
Tippingpoint Tipping Point=600e

Remedy

http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf

Remedy

http://www.3com.com/securityalert/alerts/3COM-07-003.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-3701?

    CVE-2007-3701 is classified as a medium severity vulnerability.

  • How do I fix CVE-2007-3701?

    To address CVE-2007-3701, upgrade your TippingPoint IPS to version 20070710 or later.

  • What impact does CVE-2007-3701 have on TippingPoint IPS?

    CVE-2007-3701 allows remote attackers to bypass detection by exploiting improper handling of hex-encoded Unicode characters.

  • Which TippingPoint IPS versions are affected by CVE-2007-3701?

    CVE-2007-3701 affects all TippingPoint IPS versions prior to 20070710.

  • Can CVE-2007-3701 lead to a successful attack?

    Yes, CVE-2007-3701 can enable attackers to send undetected malicious network traffic, potentially leading to successful exploitation.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203